Advisories · Weakness
Server-side request forgery (SSRF).
The server made to send requests an attacker chooses. Every Advisory and CVE whose weakness (CWE) is one of these, newest first.
- CVSS 6.9 Medium
ValueCell through 0.1.20 Unauthenticated SSRF via /api/v1/models/check
- ValueCell
- Server-side request forgery (SSRF)
- CVSS 7.1 High
JobOps through 0.13.1 SSRF via POST /api/manual-jobs/fetch
- DaKheera47 JobOps
- Server-side request forgery (SSRF)
- CVSS 9.9 CriticalCritical · CVSS 9+
KEDA: Privilege escalation from namespace admin to cluster admin via KEDA TriggerAuthentication
- Privilege escalation
- Server-side request forgery (SSRF)
<=1.5.0 · no fixed version yet
GHSA-637c-6jxx-4rwm · CVE-2026-77524 - CVSS 6.3 Medium
AliasVault: Server-Side Request Forgery via DNS rebinding in Favicon Extraction
- aliasvault
- ghcr.io/aliasvault/aliasvault
- Race condition
- Server-side request forgery (SSRF)
- CVSS 4.3 Medium
Helium: SSRF via External Calendar URL Allows Authenticated Users to Probe Internal Network
- HeliumEdu platform
- Server-side request forgery (SSRF)
- CVSS 9.4 CriticalCritical · CVSS 9+
Deserialization of untrusted data in the Gremlin graph-import path in Amazon Neptune
- AWS Amazon Neptune Engine
- Insecure deserialization
- Server-side request forgery (SSRF)
- CVSS 2.3 Low
Lychee: Distinct post-fix SSRF variant in Photo::fromUrl due to missing IP pinning after DNS-based validation
- Lychee
- Race condition
- Server-side request forgery (SSRF)
- CVSS 8.8 High
Jetty proxy blacklist performs case-sensitive matching of case-insensitive DNS hostnames
- Eclipse Foundation
- Server-side request forgery (SSRF)
- CWE-178
- CVSS 5.3 Medium
SSRF in QNAP Download Station
- QNAP Systems Inc. Download Station
- Server-side request forgery (SSRF)
- CVSS 7.3 High
PhastPress <= 3.10 - Unauthenticated Server-Side Request Forgery via 'src' Parameter
- kiboit PhastPress
- Server-side request forgery (SSRF)
- CVSS 5.0 Medium
An issue in Matomo v.5.11.2 allows a remote attacker to obtain sensitive information via the SiteContentDetector / SitesManager component.
- Server-side request forgery (SSRF)
- CVSS 8.4 High
Renovate before 44.79.0 SSRF via HTTP Preset URLs and customDatasources
- renovate
- mend renovate-ce
- Server-side request forgery (SSRF)
- CVSS 1.1 Low
Checkov by Prisma Cloud: Server-Side Request Forgery Vulnerability
- Palo Alto Networks Checkov by Prisma Cloud
- Server-side request forgery (SSRF)
- CVSS 6.8 Medium
InvoiceShelf: SSRF via unvalidated Gotenberg PDF renderer host in PDF configuration
- InvoiceShelf
- Server-side request forgery (SSRF)
- CVSS 6.8 Medium
BentoPDF: SSRF via DNS Rebinding (TOCTOU) in Cloudflare CORS Proxy Worker
- alam00000 bentopdf
- Race condition
- Server-side request forgery (SSRF)
- CVSS 4.9 Medium
Redash: JSON data source query URL can bypass base URL restriction
- redash
- Server-side request forgery (SSRF)
- CVSS 6.9 Medium
Portkey AI Gateway 1.14.0 through 1.15.2 SSRF via x-portkey-custom-host Header
- Portkey-AI gateway
- Server-side request forgery (SSRF)
- CVSS 8.2 High
TurboDocx html-to-docx through 1.23.1 SSRF via img src Remote Image Download
- TurboDocx html-to-docx
- Server-side request forgery (SSRF)
- CVSS 5.3 Medium
Gitea blind SSRF through OpenID assertion verification
- Gitea
- Server-side request forgery (SSRF)
- CVSS 5.3 Medium
Gitea OpenID discovery server-side request forgery
- Gitea
- Server-side request forgery (SSRF)
- CVSS 9.2 CriticalCritical · CVSS 9+
Kan 0.5.5 through 0.6.0 Unauthenticated SSRF via /api/download/attatchment
- kan
- Server-side request forgery (SSRF)
- CVSS 5.3 Medium
ruoyi-vue-pro through 2026.09 SSRF via Midjourney referImageUrl and notify imageUrl
- YunaiV ruoyi-vue-pro
- Server-side request forgery (SSRF)
- CVSS 6.3 Medium
ONLYOFFICE DocumentServer before 10.0.0 SSRF via downloadfile isInJwtToken Bypass
- ONLYOFFICE DocumentServer
- Server-side request forgery (SSRF)
- CVSS 4.1 Medium
FV Player 7.5.44.7212 - 7.5.54.7212 - Contributor+ SSRF via retrieve_video_data
- FV Flowplayer Video Player
- Server-side request forgery (SSRF)
- CVSS 8.6 High
CAI Content Credentials | Server-Side Request Forgery (SSRF) (CWE-918)
- Adobe Content Credentials Rust SDK
- Adobe C2PA Tool
- Server-side request forgery (SSRF)
- CVSS 8.6 High
ColdFusion | Server-Side Request Forgery (SSRF) (CWE-918)
- Adobe ColdFusion 2025
- Adobe ColdFusion 2023
- Server-side request forgery (SSRF)
- CVSS 7.7 High
ColdFusion | Server-Side Request Forgery (SSRF) (CWE-918)
- Adobe ColdFusion 2025
- Adobe ColdFusion 2023
- Server-side request forgery (SSRF)
- CVSS 10.0 CriticalCritical · CVSS 9+
ColdFusion | Server-Side Request Forgery (SSRF) (CWE-918)
- Adobe ColdFusion 2025
- Adobe ColdFusion 2023
- Server-side request forgery (SSRF)
- CVSS 8.6 High
ColdFusion | Server-Side Request Forgery (SSRF) (CWE-918)
- Adobe ColdFusion 2025
- Adobe ColdFusion 2023
- Server-side request forgery (SSRF)
- CVSS 7.1 High
ColdFusion | Server-Side Request Forgery (SSRF) (CWE-918)
- Adobe ColdFusion 2025
- Adobe ColdFusion 2023
- Server-side request forgery (SSRF)
- CVSS 7.6 High
ColdFusion | Server-Side Request Forgery (SSRF) (CWE-918)
- Adobe ColdFusion 2025
- Adobe ColdFusion 2023
- Server-side request forgery (SSRF)
- CVSS 8.4 High
Dockhand before 1.0.43 SSRF via /api/templates/compose Endpoint
- Finsys dockhand
- Server-side request forgery (SSRF)
- CVSS 5.3 Medium
Dockhand before 1.0.45 SSRF via IPv6 Transition Address Bypass in ipCategory
- Finsys dockhand
- Server-side request forgery (SSRF)
- CVSS 7.5 High
Microsoft Office SharePoint Elevation of Privilege Vulnerability
- Microsoft SharePoint Server Subscription Edition
- Server-side request forgery (SSRF)
- CVSS 7.5 High
Microsoft Office SharePoint Elevation of Privilege Vulnerability
- Microsoft SharePoint Server Subscription Edition
- Server-side request forgery (SSRF)
- CVSS 6.5 Medium
Azure Arc Elevation of Privilege Vulnerability
- Microsoft Arc Enabled Servers - Azure Connected Machine Agent
- Server-side request forgery (SSRF)
- CVSS 6.5 Medium
Microsoft Office SharePoint Information Disclosure Vulnerability
- Microsoft SharePoint Server Subscription Edition
- Server-side request forgery (SSRF)
- CVSS 7.5 High
Microsoft Office SharePoint Elevation of Privilege Vulnerability
- Microsoft SharePoint Server Subscription Edition
- Server-side request forgery (SSRF)
- CVSS 5.7 Medium
Microsoft Office SharePoint Spoofing Vulnerability
- Microsoft SharePoint Server Subscription Edition
- Server-side request forgery (SSRF)
- CVSS 6.3 Medium
Lancet through 2.3.9 SSRF Protection Bypass via netutil.IsInternalIP
- duke-git lancet
- Server-side request forgery (SSRF)
- CVSS 5.1 Medium
Shaarli through 0.16.9 SSRF via Thumbnail Retrieval update-thumbnail Route
- Shaarli
- Server-side request forgery (SSRF)
- CVSS 2.3 Low
Kavita 0.9.0 through 0.9.1.4 SSRF Blocklist Bypass via upload-cbl-file Endpoint
- Kareadita Kavita
- Server-side request forgery (SSRF)
- CVSS 6.9 Medium
Razorpay IFSC Ruby gem through 2.0.62 SSRF via IFSC lookup
- Razorpay IFSC
- Server-side request forgery (SSRF)
- CVSS 7.1 High
Kubeflow Model Registry through 0.3.17 SSRF via InferenceService Controller URL Annotation
- Kubeflow Model Registry
- Server-side request forgery (SSRF)
- CVSS 8.7 High
Misskey: Lack of rate limiting and size restrictions in RSS fetching API
- misskey
- Denial of service
- Server-side request forgery (SSRF)
- CVSS 9.1 CriticalCritical · CVSS 9+
Apache Fesod (Incubating): UrlImageConverter SSRF protection bypass via DNS rebinding
- Apache Software Foundation Apache Fesod (Incubating)
- Server-side request forgery (SSRF)
- CVSS 8.6 High
Server-side request forgery in NVIDIA AIStore framework
- NVIDIA AIStore framework
- Server-side request forgery (SSRF)
- CVSS 8.6 High
Server-side request forgery in NVIDIA AIStore framework
- NVIDIA AIStore framework
- Server-side request forgery (SSRF)
- CVSS 6.9 Medium
conductor-oss conductor KafkaPublishTask.java KafkaPublishTask.start server-side request forgery
- conductor
- Server-side request forgery (SSRF)
- CVSS 6.9 Medium
conductor-oss conductor Agentspan Agent Runtime AgentController.java server-side request forgery
- conductor
- Server-side request forgery (SSRF)
- CVSS 6.9 Medium
conductor-oss conductor Agent Card Fetching A2AService.java A2AService.getAgentCard server-side request forgery
- conductor
- Server-side request forgery (SSRF)
- CVSS 5.3 Medium
conductor-oss conductor MCP Service MCPService.java MCPService.listTools server-side request forgery
- conductor
- Server-side request forgery (SSRF)
- CVSS 5.3 Medium
conductor-oss conductor API Tool Configuration ListApiToolsTask.java ListApiToolsTask.start server-side request forgery
- conductor
- Server-side request forgery (SSRF)
- CVSS 5.3 Medium
fit2cloud MeterSphere Swagger3 Swagger3ParserApiDefinition.java Swagger3ParserApiDefinition.testUrlTimeout server-side request forgery
- fit2cloud MeterSphere
- Server-side request forgery (SSRF)
- CVSS 3.5 Low
Server-Side Request Forgery (SSRF) in GitLab
- GitLab
- Server-side request forgery (SSRF)
- CVSS 10.0 CriticalCritical · CVSS 9+
OAuth2 SSRF vulnerability in SAP Cloud SDK for Python
- SAP_SE SAP Cloud
- Server-side request forgery (SSRF)
- CVSS 6.5 Medium
A Server-Side Request Forgery (SSRF) in the serviceURL parameter of ProPhoenix Law RMS v2022.2403.3.101 allows attackers to force the application server to make unintended DNS and web requests via a…
- Server-side request forgery (SSRF)
- CVSS 6.9 Medium
EricLBuehler mistral.rs media_source.rs is_global_ip server-side request forgery
- EricLBuehler mistral.rs
- Server-side request forgery (SSRF)
- CVSS 5.3 Medium
Frappe ERPNext before 15.112.0 Server-Side Request Forgery via Configuration Field
- frappe erpnext
- Server-side request forgery (SSRF)
- CVSS 4.8 Medium
Frappe Framework before 16.17.0 Authenticated SSRF and LFI via pdfkit
- frappe
- Server-side request forgery (SSRF)